EC
Product
Experience Commerce
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 0Low 0
Watch
Add Experience Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-53690 In wildKEV | 9.0 | Sep 3 | Sitecore Products ViewState Deserialization Vulnerability Affected: through 9.0 |
| CVE-2025-53693 | 9.8 | Sep 3 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP)… Affected: 9.0 through 10.4 |
| CVE-2023-35813 | 9.8 | Jun 17 | Multiple Sitecore products allow remote code execution Affected: 8.2 through 10.3 |
Showing 3